2 ms·
If you're going to hold that against them, LastPass is just as bad: > During a workflow to derive the decryption key, the master password is leaked into a stri
by Ajedi32 8y ago
If you're going to hold that against them, LastPass is just as bad:
> During a workflow to derive the decryption key, the master password is leaked into a string buffer in memory and never scrubbed, even when LastPass is placed into a locked state.
- SlowRobotAhead 8y agoNot that storing a masterpass as sting is acceptable - nor that I readily believe that statement entirely. But why would you be using any of these without 2FA?